Testing CORS configuration, allowing any origin through